Gnosis Pay Confirms Security Incident Involving Legacy Card Customer Data

Decentralized payment infrastructure provider Gnosis Pay has confirmed that a Gnosis Pay data breach impacted historical records hosted on an outdated infrastructure layer. Unauthorized third parties managed to compromise a legacy system responsible for branded card issuing, leading to the exposure of certain customer details.

Company representatives stressed that the breach was strictly confined to the legacy consumer card database and did not affect user assets. The company's core enterprise processing platform was left completely untouched throughout the security event, according to Decrypt.

Web3 payment cards have seen substantial growth over the past year as issuers strive to bridge self-custodial wallets with traditional point-of-sale networks. However, integrating blockchain accounts with legacy financial rails often introduces hybrid attack surfaces, where older administrative databases can become targets for credential harvesting.

Security teams at Gnosis Pay moved swiftly to contain the vulnerability, notifying impacted parties and initiating forensic reviews to determine the precise scope of the data accessed. The team reiterated that on-chain smart contracts and treasury holdings remained entirely secure and unaffected by the external intrusion.

Users and compliance analysts are awaiting the publication of a comprehensive post-mortem report detailing the root cause of the unauthorized access. The incident highlights the critical need for crypto-native platforms to thoroughly decommission legacy servers when upgrading their financial infrastructure.